1463 Commits

Author SHA1 Message Date
Pete Birley
70ff2f3042 Gate: Minor shellcheck fixes
This PS makes some minor changes to the minikube k8s script to
make shellcheck happy

Change-Id: Ic5972d7de20b73aee0b019143ba778d6f1ff9271
Signed-off-by: Pete Birley <pete@port.direct>
2019-03-15 13:20:11 +00:00
Zuul
d992de6245 Merge "Ceph-RGW code cleanup" 2019-03-15 07:40:49 +00:00
Zuul
e1b729e660 Merge "Elasticsearch: Update locations for apache virtual host" 2019-03-15 06:32:51 +00:00
Renis Makadia
3552406832 Ceph-RGW code cleanup
Currently both 'deployment:rgw_keystone_user_and_endpoints`
and 'conf: rgw_ks' are used and set to true to deploy
ceph-rgw with keystone integration.

Going forward, we should only use `conf: rgw_ks: enabled: true`
to deploy ceph-rgw with keystone integration.

Change-Id: I17aecd4f977ed897bb0771edc9acafd4479777d1
2019-03-15 05:03:13 +00:00
Scott Hussey
73a360f19a (postgresql) Use root init container for chown
- Postgres initdb fails running as non-root as it cannot
  change the ownership or permission on the PVC mounted
  to the container. Update the chart to use a uid 0 init
  container for setting ownership before the postgres
  container starts.

Change-Id: I648fe7ca3dbc1f6ca6f4513360de2278be7c1ce4
2019-03-13 22:41:36 +00:00
Steve Wilkerson
3a1ad65d2d Use Luminous ceph repository temporarily
This uses the ceph luminous repository temporarily until the
issues seen recently with the mimic repository are sorted out and
addressed

Change-Id: Ic079fd2b3e948f37b9362bb221af45605230b19a
2019-03-13 15:12:46 -05:00
Pete Birley
a8fe949612 Mariadb: Support changing the root password
This PS udpates the mariadb chart to support changing the root password.

Additionally it moves to use three replicas in the gate

Change-Id: I286ad0b892e5ea2f85636a0c7af58598bcfdaec4
Signed-off-by: Pete Birley <pete@port.direct>
2019-03-12 20:03:27 +00:00
Steve Wilkerson
0b44116506 Make pod security policy job nonvoting check
This moves the pod security policy job to a nonvoting check and
removes it as a gating job. This was overlooked previously. Once
the job has been vetted, we can revisit potentially making it a
voting and gating job

Change-Id: I5d06343f94ae64355bce9d4f7862a8b18b5ea827
2019-03-12 12:50:17 -05:00
Steve Wilkerson
544805f99c Pin Docker version to 18.06.1
This pins the version of docker installed to a validated version
of docker for kubernetes 1.12.2.

Change-Id: If543dc4b84a6ea1224d4a8bb3af71cc9c20f28e4
2019-03-12 12:49:22 -05:00
Chinasubbareddy Mallavarapu
457ac52ee6 ceph-osd: Add configmap hash as annotation
This is to add missing(ceph-osd-bin) configmap  hash
to ceph-osd ds

Change-Id: I192ad29cd59a8e58e690e2775be6ade02dc22711
2019-03-11 13:45:58 -05:00
Roman Gorshunov
31e3469d28 Update Helm to version 2.13.0
This updates Helm from version v2.12.3 to v2.13.0.
The `merge` function has changed behavior, and is now called
`mergeOverwrite`.

Change-Id: Ie3364256c8abb714b748b3bf3658bd6cd1e3ce35
2019-03-11 05:53:08 +00:00
Zuul
d6996b8004 Merge "Add ingress network policy to kube-state-metrics and openstack-exporter" 2019-03-10 21:13:55 +00:00
Zuul
90ad57dc4a Merge "Add ingress network policy to grafana" 2019-03-10 10:41:46 +00:00
dt241s
f97f56fae5 Add default AppArmor profile to prometheus-openstack-exporter
Change-Id: I94e95e1f7d785a1d274e1ee3d9f90ffb00e23ea1
2019-03-08 14:51:41 -06:00
Zuul
ff84ab86dc Merge "Update ingress controller image, ingress cookie annotations" 2019-03-08 20:32:07 +00:00
Rahul Khiyani
244f177ecb readOnlyRootFilesystem: true for kibana chart
Fix for adding readOnlyRootFilesystem flag at pod
level

Change-Id: Ie2ce8bf66ac1194a319154b58c2980d1260fffe0
2019-03-08 05:24:19 +00:00
Rahul Khiyani
28e0493955 readOnlyRootFilesystem: true for Grafana chart
Fix for adding readOnlyRootFilesystem flag at pod
level

Change-Id: Icf0244ca0e5c5eb1b96b17e8b7a64819d1093f0d
2019-03-07 23:05:25 +00:00
Zuul
cf2c342338 Merge "(postgres) Fix deployment for prometheus exporter" 2019-03-07 22:43:21 +00:00
Zuul
c205f6cba7 Merge "Add podsecuritypolicy test" 2019-03-07 22:33:20 +00:00
Steve Wilkerson
3413dba8c0 Update ingress controller image, ingress cookie annotations
This updates the ingress controller image to v0.23.0, which was
required to add support for configuring cookie max age and expires
for ingresses via annotations on the ingress.

This also removes the --enable-dynamic-configuration flag, as the
flag is no longer valid in 0.23.0 due to the functionality being
a default behavior of the nginx ingress controller in recent
releases

Change-Id: I4917797c43ec973ed0bb311fc305b01f10abd4e5
2019-03-07 20:39:03 +00:00
Zuul
43ae215ca9 Merge "Elasticsearch: Add check to job for registering snapshot repo" 2019-03-07 20:19:57 +00:00
Meg Heisler
2d36d5f7ce Add ingress network policy to kube-state-metrics and openstack-exporter
This adds ingress network policies to kube-state-metrics and
openstack-exporter using the helm-toolikit template. It also
add openstack-exporter to the network policy jobs.

Change-Id: I3bfc2f1e8a35c09e577a046ebd52346de95e5745
2019-03-07 14:12:14 -06:00
Scott Hussey
0be9b28f60 (postgres) Fix deployment for prometheus exporter
- The deployment resource for the prometheus exporter was missing
  the required (by apps/v1) field spec.selector. Add it.

Change-Id: I8afb8541ea1660ee5ca610d7d2b4cfd149d317dc
2019-03-07 13:44:15 -06:00
Zuul
6497dd568a Merge "readOnlyRootFilesystem: true for Prometheus chart" 2019-03-07 19:19:21 +00:00
Zuul
7416a4bc36 Merge "readOnlyRootFilesystem: true for Prometheus exporters charts" 2019-03-07 19:13:06 +00:00
Zuul
070c3e5959 Merge "readOnlyFilesystem: true for elasticsearch chart" 2019-03-07 19:13:05 +00:00
Zuul
3d84a612f9 Merge "readOnlyFilesystem: true for fluent-logging chart" 2019-03-07 19:02:31 +00:00
Zuul
653f46be3c Merge "Add seccomp annotation function" 2019-03-07 19:02:30 +00:00
Zuul
0e8c8ff6f5 Merge "readOnlyRootFilesystem: true for Calico chart" 2019-03-07 19:00:32 +00:00
Zuul
0171373e86 Merge "readOnlyFilesystem: true for nagios chart" 2019-03-07 18:14:11 +00:00
Rahul Khiyani
bfa58f9177 readOnlyRootFilesystem: true for Prometheus chart
Fix for adding readOnlyRootFilesystem flag at pod
level

Change-Id: I04079be87780292da1bf9b2142f0a01a8b575b5b
2019-03-07 17:42:48 +00:00
MegHeisler
68a8725062 Add ingress network policy to grafana
This adds an ingress network policy to grafana
using the helm-toolit template

Change-Id: I21f096947817be11881546c91ac5f8b1b0ba77fa
2019-03-07 11:26:15 -06:00
Rahul Khiyani
ab86685bea readOnlyFilesystem: true for elasticsearch chart
Fix for adding readOnlyFilesystem flag at pod
level

Change-Id: Ife8d2b5ea02b4734ee4a83e868e16831e5f2b23f
2019-03-07 17:13:08 +00:00
Rahul Khiyani
be45316771 readOnlyFilesystem: true for fluent-logging chart
Fix for adding readOnlyFilesystem flag at pod
level

Change-Id: I29224a4f0a6a9ac98dd6016eaf7215a99230328e
2019-03-07 17:12:04 +00:00
Rahul Khiyani
5b513d333f readOnlyRootFilesystem: true for Prometheus exporters charts
Fix for adding readOnlyRootFilesystem flag at pod
level

Change-Id: I3d81f9dca7e1bce0134a39a96b96ef7712d28d84
2019-03-07 17:10:39 +00:00
Hemanth Nakkina
2d0d850d59 Add seccomp annotation function
Adds seccomp annotation function in helm toolkit.
This function can be used by charts to add seccomp
annotations in containers metadata section.

Change-Id: Icf36f1e4aff36fec8a9eefaff06d12984aeb7a78
2019-03-07 17:04:43 +00:00
Rahul Khiyani
7520f9b8e7 readOnlyRootFilesystem: true for Calico chart
Fix for adding readOnlyRootFilesystem flag at pod
level

Change-Id: I79fd55e582487ffe91a750a51c7a2c5bed13f777
2019-03-07 15:19:47 +00:00
Itxaka
8f290d3b8d
make db-{drop,init) py3 compatible
They are using the old ConfigParser library which is lowercase under
py3, so try to import the correct one if the script are run under
py3

Change-Id: I4362f55933f7dfe2198da8e5d1aa1f33d3fb821e
2019-03-07 12:57:56 +01:00
Zuul
e836707ad0 Merge "Add east-west ingress network policy to Prometheus" 2019-03-07 04:44:10 +00:00
Zuul
6f6783bf23 Merge "Add ingress network policy for Nagios" 2019-03-07 04:36:14 +00:00
Zuul
2f8d4e5bd7 Merge "[ceph-osd] fix ceph journal partition creation" 2019-03-06 20:44:34 +00:00
Meg Heisler
736af38c9c Add ingress network policy for Nagios
This adds the ingress network policy to Nagios
using the helm-toolkit template

Change-Id: If6cc66330b24c3f79f9b5c29a94ea904d1eb37d4
2019-03-06 12:42:29 -06:00
Meg Heisler
243f6c7608 Add east-west ingress network policy to Prometheus
This adds an ingress policy to Prometheus and utilizes
the helm-toolkit used in openstack-helm

Change-Id: Ia89d42a5305c94da26337aaf716978c1defae503
2019-03-06 11:56:13 -06:00
Zuul
dc6f37b0af Merge "Implement Security Context for Memcached" 2019-03-06 16:39:51 +00:00
Zuul
bc87f20029 Merge "(postgresql) Add Helm test" 2019-03-06 16:32:01 +00:00
Zuul
6c29e00d1d Merge "HTK: Refactor kubernetes security_context macro(s) to allow scoping" 2019-03-06 15:23:01 +00:00
Zuul
5c7af7e3d9 Merge "readOnlyRootFilesystem: true for openvswitch chart" 2019-03-06 15:22:54 +00:00
Zuul
07c005909b Merge "ceph-rgw: Add network policy for ceph-rgw pods" 2019-03-06 15:21:22 +00:00
Chinasubbareddy Mallavarapu
6feb7d7624 [ceph-osd] fix ceph journal partition creation
This is to run partprobe command after ceph journal
partition creation.

Change-Id: Ia9acd26adf781b4508ef7028f613350077f7a970
2019-03-06 07:54:36 -06:00
Scott Hussey
43a93e2cbd (postgresql) Add Helm test
- Add a Helm test for testing DDL and DML for Postgres

Change-Id: Ib34ea48abf836ae52b909b30fdb8275d80a3c559
2019-03-06 06:36:51 +00:00